CVE-2024-0193

CVE-2024-0193 · Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.

CVSS 7.8 · High · EPSS 0.8% · Fix available

Published: 2024-01-02T18:05:13.332Z
Updated: 2026-03-04T06:58:13.138Z

Stack: system

Affected products and versions

red hat enterprise linux 9
Versions
- ≥ 0:5.14.0-362.24.1.el9_3: Not affected (rpm)
No fix published
red hat enterprise linux 9.0 update services for sap solutions
Versions
- ≥ 0:5.14.0-70.105.1.el9_0: Not affected (rpm)
No fix published
red hat enterprise linux 9.0 update services for sap solutions
Versions
- ≥ 0:5.14.0-70.105.1.rt21.177.el9_0: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
Versions
- ≥ 0:5.14.0-284.55.1.el9_2: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
Versions
- ≥ 0:5.14.0-284.55.1.rt14.340.el9_2: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v5.8.6-22: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v5.8.6-11: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v6.8.1-407: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v5.8.6-19: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v1.0.0-479: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v5.8.6-7: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v0.4.0-247: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v5.8.6-5: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v1.1.0-227: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v5.8.1-470: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v2.9.6-14: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v5.8.6-2: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v5.8.6-24: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v5.8.6-10: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v0.1.0-525: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v0.1.0-224: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
Versions
- ≥ v0.28.1-56: Not affected (rpm)
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published

Original sources

Check your server →